"Because of how PostgreSQL string escaping routines handle invalid UTF-8 characters, in combination with how invalid byte sequences within the invalid UTF-8 characters are processed by psql, an attacker can leverage CVE-2025-1094 to generate a SQL injection."
UTF-8 and its consequences have been a disaster for information security
UTF-8 and its consequences have been a disaster for information security